Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/34352e3136312e342e302f32322d3232203d3e20323638343234.roa
File:                     34352e3136312e342e302f32322d3232203d3e20323638343234.roa (raw, json)
Hash identifier:          zx9I+engVq+FPIS+3kiagJAgpLTTZi4DsqeQ2MQJwZY=
Subject key identifier:   40:48:D3:61:DD:FA:1C:AB:A6:20:94:A3:44:39:FE:57:CF:E8:5D:D8
Certificate issuer:       /CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
Certificate serial:       678F216E48C6F0C92EBDA115B8CA4BCA6F5F30DD
Authority key identifier: 93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/34352e3136312e342e302f32322d3232203d3e20323638343234.roa
Signing time:             Thu 06 Mar 2025 01:41:50 +0000
ROA not before:           Thu 06 Mar 2025 01:36:50 +0000
ROA not after:            Thu 05 Mar 2026 01:41:50 +0000
asID:                     268424
IP address blocks:        45.161.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl
                          rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8f:21:6e:48:c6:f0:c9:2e:bd:a1:15:b8:ca:4b:ca:6f:5f:30:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
        Validity
            Not Before: Mar  6 01:36:50 2025 GMT
            Not After : Mar  5 01:41:50 2026 GMT
        Subject: CN=4048D361DDFA1CABA62094A34439FE57CFE85DD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3b:1d:8a:bc:6b:9f:55:50:29:61:3b:47:d5:
                    89:9b:e8:04:68:4a:c0:d0:9f:7b:ee:1e:3c:0a:37:
                    cb:c4:23:5c:28:ea:8c:12:2e:d4:83:14:64:ab:ec:
                    bf:91:0a:4a:07:c2:04:26:22:e9:b7:4f:13:c7:39:
                    25:b7:cb:58:97:e7:00:27:d4:44:7f:2d:df:1e:da:
                    6b:9c:3c:3d:45:ef:f1:94:56:06:f5:bd:93:32:6d:
                    f0:df:ba:ec:a8:65:5e:42:a0:d6:0b:64:af:b6:6f:
                    73:6a:df:31:99:93:12:8a:43:cc:3c:e5:dc:10:74:
                    ca:11:01:81:14:01:cd:76:15:77:7d:a2:c5:53:0a:
                    d2:23:c0:7f:59:15:2b:6d:92:16:c8:1e:71:f9:d7:
                    be:51:da:97:dd:65:4a:3a:59:61:1a:2a:13:2d:19:
                    cf:aa:4e:87:df:78:6d:1a:a7:07:5c:24:65:73:64:
                    b7:69:35:59:03:87:b9:88:0f:f0:d4:70:76:95:4f:
                    f4:25:a6:25:f2:00:25:05:40:b6:eb:38:11:9b:c7:
                    80:56:e7:02:d9:e7:0f:27:e1:cc:d6:af:23:9c:44:
                    0c:c7:1b:2d:7e:a8:b4:50:02:76:59:18:5d:39:69:
                    35:75:21:2d:86:5a:51:a9:52:96:44:c4:84:21:0c:
                    21:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:48:D3:61:DD:FA:1C:AB:A6:20:94:A3:44:39:FE:57:CF:E8:5D:D8
            X509v3 Authority Key Identifier:
                keyid:93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/34352e3136312e342e302f32322d3232203d3e20323638343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:40:52:8a:33:b6:e6:6a:c5:b3:44:0d:45:c6:78:e4:4a:21:
         9a:17:b7:35:55:25:7d:2b:d0:97:39:99:55:68:af:bb:08:f6:
         a9:b7:f5:30:4e:55:41:79:43:b9:48:57:ad:f5:e4:dc:96:59:
         bc:74:6e:cb:fd:eb:6a:0d:3e:e1:2a:25:bb:99:29:af:0e:4b:
         17:00:1e:85:1f:fb:40:de:b2:e7:2c:6c:f3:d6:6e:15:15:e7:
         c7:7b:fe:e4:ee:bf:f3:4e:e3:ae:8f:ff:a9:2d:a4:fe:0a:3b:
         c2:bd:da:20:ec:9f:68:63:79:ee:8a:e4:13:34:9e:f2:6d:01:
         ee:df:57:93:cb:21:26:17:20:b0:e9:5c:a1:55:cc:74:74:a6:
         bd:7b:3a:4b:0c:2d:b8:b1:80:67:56:b0:80:d7:80:2b:a2:11:
         9d:5e:3a:b8:b6:ad:24:01:b3:dc:52:f6:6e:39:2a:9c:b7:82:
         7c:bb:07:b6:bc:3d:86:07:2b:ee:98:32:58:4b:7e:aa:73:66:
         fb:64:a8:c6:00:dc:90:0f:18:df:84:9a:c4:b1:47:ca:9d:30:
         cb:f0:ba:a2:84:94:52:72:c9:ee:52:c0:ee:15:26:e6:10:4a:
         5b:98:40:43:ff:5f:aa:af:4a:91:c9:5d:eb:a4:39:27:64:9e:
         5e:de:54:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:07 2025 by rpki-client on console.sobornost.net